Changeset 21993 for trunk/wp-includes/formatting.php

Timestamp:

09/25/2012 01:54:12 AM (13 years ago)

Author:

nacin

Message:

Move sanitization for the multisite illegal_names, limited_email_domains, and banned_email_domains options to sanitize_option(). props wonderboymusic. fixes #21552.

File:

• trunk/wp-includes/formatting.php (modified) (1 diff)

trunk/wp-includes/formatting.php

@@ -2863 +2863 @@
             break;
 
+        case 'illegal_names':
+            if ( ! is_array( $value ) )
+                $value = explode( "\n", $value );
+
+            $value = array_values( array_filter( array_map( 'trim', $value ) ) );
+
+            if ( ! $value )
+                $value = '';
+            break;
+
+        case 'limited_email_domains':
+        case 'banned_email_domains':
+            if ( ! is_array( $value ) )
+                $value = explode( "\n", $value );
+
+            $domains = array_values( array_filter( array_map( 'trim', $value ) ) );
+            $value = array();
+
+            foreach ( $domains as $domain ) {
+                if ( ! preg_match( '/(--|\.\.)/', $domain ) && preg_match( '|^([a-zA-Z0-9-\.])+$|', $domain ) )
+                    $value[] = $domain;
+            }
+            if ( ! $value )
+                $value = '';
+            break;
+
         case 'timezone_string':
             $allowed_zones = timezone_identifiers_list();